Skip to content
OpenAdvisories

Archive

27 January 2021

Vulnerabilities first published on this day (UTC), newest first.

44 results · Feed

  • Unscored —

    Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary…

  • Unscored —

    jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid re…

  • High 7.5

    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences …

  • High 7.5
    CVE-2021-26117 EPSS 12%

    ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to …